volatility3 windows.consoles.Consoles and windows.cmdscan.CmdScan not working

Describe the bug When I run windows.consoles.Consoles and windows.cmdscan.CmdScan against Win 7 images or Win 10 images they fail saying it is not implemented. So what Windows version is OK?

Context Volatility Version: Volatility 3 Framework 2.27.0 Operating System: Linux kali 5.19.0-kali2-amd64 Python Version: Python 3.10.8 Suspected Operating System: Windows 7 (6.1 15.7600) and Windows 10 (10.0 15.17134). Command: windows.consoles.Consoles and windows.cmdscan.CmdScan

To Reproduce Steps to reproduce the behavior:

Use commands python3 vol.py -f ../Desktop_Phineas.raw windows.consoles.Consoles python3 vol.py -f ../Desktop_Phineas.raw windows.cmdscan.CmdScan python3 vol.py -f ../Desktop_cs3.raw windows.consoles.Consoles python3 vol.py -f ../Desktop_cs3.raw windows.cmdscan.CmdScan
See error Expected behavior I expected the results similar to the consoles and cmdscan commands of Volatility 2 (these images worked in volatility 2).

Example output ┌──(kali㉿kali)-[~/volatility3] └─$ python3 vol.py -vvv -f ../Desktop_Phineas.raw windows.cmdscan.CmdScan 1 ⨯ INFO volatility3.cli: Volatility plugins path: ['/home/kali/volatility3/volatility3/plugins', '/home/kali/volatility3/volatility3/framework/plugins'] INFO volatility3.cli: Volatility symbols path: ['/home/kali/volatility3/volatility3/symbols', '/home/kali/volatility3/volatility3/framework/symbols'] DEBUG volatility3.plugins.yarascan: Using yara-python module DEBUG volatility3.plugins.renderers.parquet_renderer: Arrow/Parquet libraries not found Volatility 3 Framework 2.27.0 INFO volatility3.framework.automagic: Detected a windows category plugin INFO volatility3.framework.automagic: Running automagic: ConstructionMagic DETAIL 1 volatility3.framework.configuration.requirements: IndexError - No configuration provided: plugins.CmdScan.kernel.layer_name DETAIL 1 volatility3.framework.configuration.requirements: Symbol table requirement not yet fulfilled: plugins.CmdScan.kernel.symbol_table_name DETAIL 1 volatility3.framework.configuration.requirements: IndexError - No configuration provided: plugins.CmdScan.kernel.layer_name DETAIL 1 volatility3.framework.configuration.requirements: Symbol table requirement not yet fulfilled: plugins.CmdScan.kernel.symbol_table_name DETAIL 1 volatility3.framework.automagic.construct_layers: Failed on requirement: plugins.CmdScan.kernel DETAIL 1 volatility3.framework.configuration.requirements: IndexError - No configuration provided: plugins.CmdScan.kernel.layer_name DETAIL 1 volatility3.framework.automagic.construct_layers: Failed on requirement: plugins.CmdScan.kernel.layer_name DETAIL 1 volatility3.framework.configuration.requirements: IndexError - No configuration provided: plugins.CmdScan.kernel.layer_name DETAIL 1 volatility3.framework.automagic.construct_layers: Failed on requirement: plugins.CmdScan.kernel DETAIL 1 volatility3.framework.configuration.requirements: Symbol table requirement not yet fulfilled: plugins.CmdScan.kernel.symbol_table_name DETAIL 1 volatility3.framework.automagic.construct_layers: Failed on requirement: plugins.CmdScan.kernel.symbol_table_name DETAIL 1 volatility3.framework.configuration.requirements: Symbol table requirement not yet fulfilled: plugins.CmdScan.kernel.symbol_table_name DETAIL 1 volatility3.framework.automagic.construct_layers: Failed on requirement: plugins.CmdScan.kernel DETAIL 1 volatility3.framework.configuration.requirements: IndexError - No configuration provided: plugins.CmdScan.kernel.layer_name DETAIL 1 volatility3.framework.configuration.requirements: Symbol table requirement not yet fulfilled: plugins.CmdScan.kernel.symbol_table_name DETAIL 1 volatility3.framework.automagic.construct_layers: Failed on requirement: plugins.CmdScan INFO volatility3.framework.automagic: Running automagic: SymbolCacheMagic INFO volatility3.framework.automagic: Running automagic: LayerStacker DETAIL 1 volatility3.framework.configuration.requirements: IndexError - No configuration provided: plugins.CmdScan.kernel.layer_name DETAIL 1 volatility3.framework.configuration.requirements: Symbol table requirement not yet fulfilled: plugins.CmdScan.kernel.symbol_table_name DEBUG volatility3.framework.automagic.windows: Detecting Self-referential pointer for recent windows DEBUG volatility3.framework.automagic.windows: DtbSelfRef64bit test succeeded at 0x187000 DEBUG volatility3.framework.automagic.windows: DTB was found at: 0x187000 DETAIL 1 volatility3.framework.configuration.requirements: IndexError - No configuration provided: plugins.CmdScan.kernel.layer_name DETAIL 1 volatility3.framework.configuration.requirements: IndexError - No configuration provided: plugins.CmdScan.kernel.layer_name DETAIL 1 volatility3.framework.configuration.requirements: Symbol table requirement not yet fulfilled: plugins.CmdScan.kernel.symbol_table_name DETAIL 1 volatility3.framework.configuration.requirements: IndexError - No configuration provided: plugins.CmdScan.kernel.layer_name DETAIL 1 volatility3.framework.configuration.requirements: Symbol table requirement not yet fulfilled: plugins.CmdScan.kernel.symbol_table_name DETAIL 1 volatility3.framework.automagic.construct_layers: Failed on requirement: plugins.CmdScan.kernel DETAIL 1 volatility3.framework.configuration.requirements: IndexError - No configuration provided: plugins.CmdScan.kernel.layer_name DETAIL 1 volatility3.framework.configuration.requirements: IndexError - No configuration provided: plugins.CmdScan.kernel.layer_name.memory_layer DETAIL 1 volatility3.framework.interfaces.configuration: TypeError - kernel_virtual_offset requirements only accept int type: None DETAIL 1 volatility3.framework.interfaces.configuration: TypeError - kernel_virtual_offset requirements only accept int type: None DETAIL 1 volatility3.framework.interfaces.configuration: TypeError - kernel_banner requirements only accept str type: None DETAIL 1 volatility3.framework.interfaces.configuration: TypeError - kernel_banner requirements only accept str type: None DETAIL 1 volatility3.framework.configuration.requirements: Symbol table requirement not yet fulfilled: plugins.CmdScan.kernel.symbol_table_name DETAIL 1 volatility3.framework.automagic.construct_layers: Failed on requirement: plugins.CmdScan.kernel.symbol_table_name DETAIL 1 volatility3.framework.configuration.requirements: Symbol table requirement not yet fulfilled: plugins.CmdScan.kernel.symbol_table_name DETAIL 1 volatility3.framework.automagic.construct_layers: Failed on requirement: plugins.CmdScan.kernel DETAIL 1 volatility3.framework.configuration.requirements: Symbol table requirement not yet fulfilled: plugins.CmdScan.kernel.symbol_table_name DETAIL 1 volatility3.framework.automagic.construct_layers: Failed on requirement: plugins.CmdScan DEBUG volatility3.framework.automagic.stacker: physical_layer maximum_address: 536870911 DEBUG volatility3.framework.automagic.stacker: Stacked layers: ['IntelLayer', 'FileLayer'] INFO volatility3.framework.automagic: Running automagic: WinSwapLayers INFO volatility3.framework.automagic: Running automagic: KernelPDBScanner DETAIL 1 volatility3.framework.configuration.requirements: Symbol table requirement not yet fulfilled: plugins.CmdScan.kernel.symbol_table_name DETAIL 1 volatility3.framework.configuration.requirements: Symbol table requirement not yet fulfilled: plugins.CmdScan.kernel.symbol_table_name DETAIL 1 volatility3.framework.configuration.requirements: Symbol table requirement not yet fulfilled: plugins.CmdScan.kernel.symbol_table_name DEBUG volatility3.framework.automagic.pdbscan: Kernel base determination - searching layer module list structure DEBUG volatility3.framework.automagic.pdbscan: Setting kernel_virtual_offset to 0xf8000284b000 DEBUG volatility3.framework.symbols.windows.pdbutil: Using symbol library: ntkrnlmp.pdb/16CBD9DBFDC24E7F8796DCFDA1497FFA-2 INFO volatility3.framework.automagic: Running automagic: SymbolFinder
INFO volatility3.framework.automagic: Running automagic: KernelModule DEBUG volatility3.cli: Successfully constructed windows.cmdscan.CmdScan (2, 0, 0)

PID Process ConsoleInfo Property Address Data DEBUG volatility3.plugins.windows.consoles: Possible CommandHistorySize values before checking Registry: {50} DEBUG volatility3.plugins.windows.consoles: Possible HistoryBufferMax values before checking Registry: [] DEBUG volatility3.framework.symbols: Unresolved reference: symbol_table_name1!_KTMNOTIFICATION_PACKET DEBUG volatility3.framework.symbols: Unresolved reference: symbol_table_name1!_EPROCESS_QUOTA_BLOCK DEBUG volatility3.framework.symbols: Unresolved reference: symbol_table_name1!_PAGEFAULT_HISTORY DEBUG volatility3.framework.symbols: Unresolved reference: symbol_table_name1!_PSP_CPU_QUOTA_APC DEBUG volatility3.framework.symbols: Unresolved reference: symbol_table_name1!_JOB_ACCESS_STATE DEBUG volatility3.framework.symbols: Unresolved reference: symbol_table_name1!_ACTIVATION_CONTEXT_DATA DEBUG volatility3.framework.symbols: Unresolved reference: symbol_table_name1!_FLS_CALLBACK_INFO DEBUG volatility3.framework.symbols: Unresolved reference: symbol_table_name1!_ASSEMBLY_STORAGE_MAP DEBUG volatility3.framework.symbols: Unresolved reference: symbol_table_name1!_SCSI_REQUEST_BLOCK DEBUG volatility3.framework.symbols.windows.extensions.registry: Unexpected node type encountered when traversing subkeys: symbol_table_name1!_CM_KEY_INDEX, signature: n DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x24) DEBUG volatility3.framework.symbols.windows.extensions.registry: Unexpected node type encountered when traversing subkeys: symbol_table_name1!_CM_KEY_INDEX, signature: n DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x1396c) DEBUG volatility3.framework.symbols.windows.extensions.registry: Unexpected node type encountered when traversing subkeys: symbol_table_name1!_CM_KEY_INDEX, signature: n DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x24) DEBUG volatility3.framework.symbols.windows.extensions.registry: Unexpected node type encountered when traversing subkeys: symbol_table_name1!_CM_KEY_INDEX, signature: n DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x24) DEBUG volatility3.framework.symbols.windows.extensions.registry: Unexpected node type encountered when traversing subkeys: symbol_table_name1!_CM_KEY_INDEX, signature: n DEBUG volatility3.framework.symbols.windows.extensions.registry: Unexpected node type encountered when traversing subkeys: symbol_table_name1!_CM_KEY_INDEX, signature: n DEBUG volatility3.framework.symbols.windows.extensions.registry: Unexpected node type encountered when traversing subkeys: symbol_table_name1!_CM_KEY_INDEX, signature: n DEBUG volatility3.framework.symbols.windows.extensions.registry: Unexpected node type encountered when traversing subkeys: symbol_table_name1!_CM_KEY_INDEX, signature: n DEBUG volatility3.plugins.windows.cmdscan: Possible CommandHistorySize values: {50} DEBUG volatility3.plugins.windows.cmdscan: Found conhost process <EPROCESS symbol_table_name1!_EPROCESS: layer_name @ 0xfa8002bbf060 #1232> with pid 2136 DEBUG volatility3.plugins.windows.cmdscan: Found conhost.exe base at 0xff720000 DEBUG volatility3.plugins.windows.consoles: Determined OS Version: 6.1 15.7600 Traceback (most recent call last): File "/home/kali/volatility3/vol.py", line 11, in volatility3.cli.main() File "/home/kali/volatility3/volatility3/cli/init.py", line 934, in main CommandLine().run() File "/home/kali/volatility3/volatility3/cli/init.py", line 522, in run renderer.render(grid) File "/home/kali/volatility3/volatility3/cli/text_renderer.py", line 329, in render grid.populate(visitor, outfd) File "/home/kali/volatility3/volatility3/framework/renderers/init.py", line 318, in populate for level, item in self._generator: File "/home/kali/volatility3/volatility3/framework/plugins/windows/cmdscan.py", line 298, in _generator for ( File "/home/kali/volatility3/volatility3/framework/plugins/windows/cmdscan.py", line 138, in get_command_history conhost_symbol_table = consoles.Consoles.create_conhost_symbol_table( File "/home/kali/volatility3/volatility3/framework/plugins/windows/consoles.py", line 348, in create_conhost_symbol_table symbol_filename, class_types = cls.determine_conhost_version( File "/home/kali/volatility3/volatility3/framework/plugins/windows/consoles.py", line 317, in determine_conhost_version raise NotImplementedError( NotImplementedError: This version of Windows is not supported: 6.1 15.7600!

Additional information Add any other information about the problem here.

Nov 17 '25 14:11 Phyambre

Additional outputs:

┌──(kali㉿kali)-[~/volatility3] └─$ python3 vol.py -vvv -f ../Desktop_cs3.raw windows.cmdscan.CmdScan 1 ⨯ INFO volatility3.cli: Volatility plugins path: ['/home/kali/volatility3/volatility3/plugins', '/home/kali/volatility3/volatility3/framework/plugins'] INFO volatility3.cli: Volatility symbols path: ['/home/kali/volatility3/volatility3/symbols', '/home/kali/volatility3/volatility3/framework/symbols'] DEBUG volatility3.plugins.yarascan: Using yara-python module DEBUG volatility3.plugins.renderers.parquet_renderer: Arrow/Parquet libraries not found Volatility 3 Framework 2.27.0 INFO volatility3.framework.automagic: Detected a windows category plugin INFO volatility3.framework.automagic: Running automagic: ConstructionMagic DETAIL 1 volatility3.framework.configuration.requirements: IndexError - No configuration provided: plugins.CmdScan.kernel.layer_name DETAIL 1 volatility3.framework.configuration.requirements: Symbol table requirement not yet fulfilled: plugins.CmdScan.kernel.symbol_table_name DETAIL 1 volatility3.framework.configuration.requirements: IndexError - No configuration provided: plugins.CmdScan.kernel.layer_name DETAIL 1 volatility3.framework.configuration.requirements: Symbol table requirement not yet fulfilled: plugins.CmdScan.kernel.symbol_table_name DETAIL 1 volatility3.framework.automagic.construct_layers: Failed on requirement: plugins.CmdScan.kernel DETAIL 1 volatility3.framework.configuration.requirements: IndexError - No configuration provided: plugins.CmdScan.kernel.layer_name DETAIL 1 volatility3.framework.automagic.construct_layers: Failed on requirement: plugins.CmdScan.kernel.layer_name DETAIL 1 volatility3.framework.configuration.requirements: IndexError - No configuration provided: plugins.CmdScan.kernel.layer_name DETAIL 1 volatility3.framework.automagic.construct_layers: Failed on requirement: plugins.CmdScan.kernel DETAIL 1 volatility3.framework.configuration.requirements: Symbol table requirement not yet fulfilled: plugins.CmdScan.kernel.symbol_table_name DETAIL 1 volatility3.framework.automagic.construct_layers: Failed on requirement: plugins.CmdScan.kernel.symbol_table_name DETAIL 1 volatility3.framework.configuration.requirements: Symbol table requirement not yet fulfilled: plugins.CmdScan.kernel.symbol_table_name DETAIL 1 volatility3.framework.automagic.construct_layers: Failed on requirement: plugins.CmdScan.kernel DETAIL 1 volatility3.framework.configuration.requirements: IndexError - No configuration provided: plugins.CmdScan.kernel.layer_name DETAIL 1 volatility3.framework.configuration.requirements: Symbol table requirement not yet fulfilled: plugins.CmdScan.kernel.symbol_table_name DETAIL 1 volatility3.framework.automagic.construct_layers: Failed on requirement: plugins.CmdScan INFO volatility3.framework.automagic: Running automagic: SymbolCacheMagic INFO volatility3.framework.automagic: Running automagic: LayerStacker DETAIL 1 volatility3.framework.configuration.requirements: IndexError - No configuration provided: plugins.CmdScan.kernel.layer_name DETAIL 1 volatility3.framework.configuration.requirements: Symbol table requirement not yet fulfilled: plugins.CmdScan.kernel.symbol_table_name DEBUG volatility3.framework.automagic.windows: Detecting Self-referential pointer for recent windows DEBUG volatility3.framework.automagic.windows: DtbSelfRef64bit test succeeded at 0x1ad000 DEBUG volatility3.framework.automagic.windows: DTB was found at: 0x1ad000 DETAIL 1 volatility3.framework.configuration.requirements: IndexError - No configuration provided: plugins.CmdScan.kernel.layer_name DETAIL 1 volatility3.framework.configuration.requirements: IndexError - No configuration provided: plugins.CmdScan.kernel.layer_name DETAIL 1 volatility3.framework.configuration.requirements: Symbol table requirement not yet fulfilled: plugins.CmdScan.kernel.symbol_table_name DETAIL 1 volatility3.framework.configuration.requirements: IndexError - No configuration provided: plugins.CmdScan.kernel.layer_name DETAIL 1 volatility3.framework.configuration.requirements: Symbol table requirement not yet fulfilled: plugins.CmdScan.kernel.symbol_table_name DETAIL 1 volatility3.framework.automagic.construct_layers: Failed on requirement: plugins.CmdScan.kernel DETAIL 1 volatility3.framework.configuration.requirements: IndexError - No configuration provided: plugins.CmdScan.kernel.layer_name DETAIL 1 volatility3.framework.configuration.requirements: IndexError - No configuration provided: plugins.CmdScan.kernel.layer_name.memory_layer DETAIL 1 volatility3.framework.interfaces.configuration: TypeError - kernel_virtual_offset requirements only accept int type: None DETAIL 1 volatility3.framework.interfaces.configuration: TypeError - kernel_virtual_offset requirements only accept int type: None DETAIL 1 volatility3.framework.interfaces.configuration: TypeError - kernel_banner requirements only accept str type: None DETAIL 1 volatility3.framework.interfaces.configuration: TypeError - kernel_banner requirements only accept str type: None DETAIL 1 volatility3.framework.configuration.requirements: Symbol table requirement not yet fulfilled: plugins.CmdScan.kernel.symbol_table_name DETAIL 1 volatility3.framework.automagic.construct_layers: Failed on requirement: plugins.CmdScan.kernel.symbol_table_name DETAIL 1 volatility3.framework.configuration.requirements: Symbol table requirement not yet fulfilled: plugins.CmdScan.kernel.symbol_table_name DETAIL 1 volatility3.framework.automagic.construct_layers: Failed on requirement: plugins.CmdScan.kernel DETAIL 1 volatility3.framework.configuration.requirements: Symbol table requirement not yet fulfilled: plugins.CmdScan.kernel.symbol_table_name DETAIL 1 volatility3.framework.automagic.construct_layers: Failed on requirement: plugins.CmdScan DEBUG volatility3.framework.automagic.stacker: physical_layer maximum_address: 1073741823 DEBUG volatility3.framework.automagic.stacker: Stacked layers: ['IntelLayer', 'FileLayer'] INFO volatility3.framework.automagic: Running automagic: WinSwapLayers INFO volatility3.framework.automagic: Running automagic: KernelPDBScanner DETAIL 1 volatility3.framework.configuration.requirements: Symbol table requirement not yet fulfilled: plugins.CmdScan.kernel.symbol_table_name DETAIL 1 volatility3.framework.configuration.requirements: Symbol table requirement not yet fulfilled: plugins.CmdScan.kernel.symbol_table_name DETAIL 1 volatility3.framework.configuration.requirements: Symbol table requirement not yet fulfilled: plugins.CmdScan.kernel.symbol_table_name DEBUG volatility3.framework.automagic.pdbscan: Kernel base determination - searching layer module list structure DEBUG volatility3.framework.automagic.pdbscan: Kernel base determination - searching layer module list structure DEBUG volatility3.framework.automagic.pdbscan: Setting kernel_virtual_offset to 0xf8037bc95000 DEBUG volatility3.framework.symbols.windows.pdbutil: Using symbol library: ntkrnlmp.pdb/039281E5F80D4711858194C121C9D89D-1 INFO volatility3.framework.automagic: Running automagic: SymbolFinder
INFO volatility3.framework.automagic: Running automagic: KernelModule DEBUG volatility3.cli: Successfully constructed windows.cmdscan.CmdScan (2, 0, 0)

PID Process ConsoleInfo Property Address Data DEBUG volatility3.plugins.windows.consoles: Possible CommandHistorySize values before checking Registry: {50} DEBUG volatility3.plugins.windows.consoles: Possible HistoryBufferMax values before checking Registry: [] DEBUG volatility3.framework.symbols: Unresolved reference: symbol_table_name1!_JOB_ACCESS_STATE DEBUG volatility3.framework.symbols: Unresolved reference: symbol_table_name1!_JOB_CPU_RATE_CONTROL DEBUG volatility3.framework.symbols: Unresolved reference: symbol_table_name1!_JOB_NET_RATE_CONTROL DEBUG volatility3.framework.symbols: Unresolved reference: symbol_table_name1!_JOB_NOTIFICATION_INFORMATION DEBUG volatility3.framework.symbols: Unresolved reference: symbol_table_name1!_PSP_STORAGE DEBUG volatility3.framework.symbols: Unresolved reference: symbol_table_name1!_KTMNOTIFICATION_PACKET DEBUG volatility3.framework.symbols: Unresolved reference: symbol_table_name1!_DBGKP_ERROR_PORT DEBUG volatility3.framework.symbols: Unresolved reference: symbol_table_name1!_CI_NGEN_PATHS DEBUG volatility3.framework.symbols: Unresolved reference: symbol_table_name1!_WNF_SCOPE_MAP DEBUG volatility3.framework.symbols: Unresolved reference: symbol_table_name1!_EX_WNF_SUBSCRIPTION DEBUG volatility3.framework.symbols: Unresolved reference: symbol_table_name1!_PO_PROCESS_ENERGY_CONTEXT DEBUG volatility3.framework.symbols: Unresolved reference: symbol_table_name1!_EPROCESS_QUOTA_BLOCK DEBUG volatility3.framework.symbols: Unresolved reference: symbol_table_name1!_PAGEFAULT_HISTORY DEBUG volatility3.framework.symbols: Unresolved reference: symbol_table_name1!_DEVICE_NODE_IOMMU_EXTENSION DEBUG volatility3.framework.symbols: Unresolved reference: symbol_table_name1!_EX_TIMER DEBUG volatility3.framework.symbols: Unresolved reference: symbol_table_name1!_ETW_SOFT_RESTART_CONTEXT DEBUG volatility3.framework.symbols: Unresolved reference: symbol_table_name1!_ETW_STACK_CACHE DEBUG volatility3.framework.symbols: Unresolved reference: symbol_table_name1!_ACTIVATION_CONTEXT_DATA DEBUG volatility3.framework.symbols: Unresolved reference: symbol_table_name1!_FLS_CALLBACK_INFO DEBUG volatility3.framework.symbols: Unresolved reference: symbol_table_name1!_ASSEMBLY_STORAGE_MAP DEBUG volatility3.framework.symbols: Unresolved reference: symbol_table_name1!_ETW_PERFECT_HASH_FUNCTION DEBUG volatility3.framework.symbols: Unresolved reference: symbol_table_name1!_HAL_PMC_COUNTERS DEBUG volatility3.framework.symbols: Unresolved reference: symbol_table_name1!_SCSI_REQUEST_BLOCK DEBUG volatility3.framework.symbols.windows.extensions.registry: Unexpected node type encountered when traversing subkeys: symbol_table_name1!_CM_KEY_INDEX, signature: n DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x9213a4) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x24) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x24) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x24) DEBUG volatility3.framework.symbols.windows.extensions.registry: Unexpected node type encountered when traversing subkeys: symbol_table_name1!_CM_KEY_INDEX, signature: n DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x24) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x24) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x24) DEBUG volatility3.framework.symbols.windows.extensions.registry: Unexpected node type encountered when traversing subkeys: symbol_table_name1!_CM_KEY_INDEX, signature: n DEBUG volatility3.framework.symbols.windows.extensions.registry: Unexpected node type encountered when traversing subkeys: symbol_table_name1!_CM_KEY_INDEX, signature: n DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x2c5e2c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x88594) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x886a4) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x887b4) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x888c4) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x264024) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x20ac44) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x20ad4c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x20ae54) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x20af5c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x167e74) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x20b084) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x2825c4) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x2b5804) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x2b590c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x2c5ee4) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x889d4) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x88ae4) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x2c5f9c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x1c8e24) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x87664) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x2013d4) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x87a24) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x20b194) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x9b44c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x4912c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x297814) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x87024) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x2472d4) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x20b2a4) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x280b94) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x298414) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x461ec) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x462f4) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x9c1ac) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x2014dc) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x88bf4) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x88d04) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x201684) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x20bb24) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x20b3b4) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x20b4c4) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x88e14) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x87194) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x870dc) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x20b5d4) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x88f24) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x20182c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x8724c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x89064) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x201984) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x20b6e4) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x20b7f4) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x201b2c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x201c34) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x201d3c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x201e44) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x9cf1c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x2841dc) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x282504) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x8951c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x26411c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x20a73c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x20a834) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x201f0c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x1fd5ac) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x23c4c4) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x278b34) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x278c3c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x20a92c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x8756c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x46e44) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x26430c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x87304) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x873bc) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x28bec4) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x263ec4) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x47a34) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x201f9c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x26bd5c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x20b904) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x23c57c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x89614) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x20ba14) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x8971c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x20bc34) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x264214) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x87474) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x485ac) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x20bd44) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x4f7c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x22693c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x2dcc44) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x2dc79c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x1523c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x26930c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x1f2bec) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x23bb7c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0xbd5d4) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x170bec) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0xbcfc) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x470a4) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0xcb14) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x8982c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x45704) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x19c3dc) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x16881c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0xbb32c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x28b76c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x24fcc4) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x22e8bc) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x2575fc) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x2232a4) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x1a6434) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x1b85ac) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x16e3dc) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x23ca44) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0xc6c6c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0xbbdbc) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x4bc24) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x162cfc) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x1d1aac) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x299d14) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x1c839c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x4a374) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x1b39bc) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0xb5764) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x2821c4) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x19d05c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x23b24c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x14554) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x2158ac) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x20744) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x209a3c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x223024) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x8c7dc) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x47b3c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x27f8fc) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0xa0b3c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x463fc) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x220434) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x2acdac) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x46f54) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x223e44) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x4d584) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x2442fc) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x9fcd4) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x1c0b84) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x4b024) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x23e1d4) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x125b4) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x224c9c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x4ebac) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x252024) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x16042c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x221c34) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x2bd2b4) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x2141c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x2c0304) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0xbf924) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x204294) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x987c4) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0xc09ac) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x233b7c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x298024) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x22116c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x22412c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x1edf7c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x2784cc) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x3cbc) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0xbc8cc) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x2a3e0c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x251704) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x265f54) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0xb3534) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x2809e4) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x22761c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x2c9ecc) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x496bc) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x1eb2dc) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x231594) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x25dbfc) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x27e364) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x263924) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x16e454) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x23357c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x8ab2c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x2c06fc) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x1ed024) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x20c1a4) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x1aee74) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x26774c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x2259f4) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x486b4) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x9ee64) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x8a024) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x1d84ac) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x8775c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x1e1e2c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x24f4ac) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x261574) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x8d47c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x2914bc) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x23ad9c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x2826f4) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x9e024) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x247674) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x2c0b04) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x296f6c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x1ed834) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x289874) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x8b384) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x299024) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x2991ac) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x19211c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x1930dc) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x1216c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x2bd414) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x252254) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x1f1134) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x299ea4) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x264ce4) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x514c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x2494bc) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x18d7b4) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x18d614) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x18d15c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x18d024) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x1934c4) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x4a2b4) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x4af34) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x248974) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x121c4) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x4c784) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x4d47c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0xb5024) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x2a3cfc) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0xb5c34) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x8c6e4) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x8ba54) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x8d35c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0xbe85c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0xbdd14) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x4922c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x498c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x15154) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x2b64cc) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x1b45c4) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x2932dc) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x23873c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x1f3464) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x1e293c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x2b036c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x21344) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x2207c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0xca4c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x240d04) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0xd8cc) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x23f68c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x176f34) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x21bf4c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x217dec) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x2a9944) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x291d44) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x1a70fc) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x1d232c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x1ea41c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x244a6c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x292b0c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x291ecc) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x1afc1c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x281efc) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x15e94) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x19dbdc) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x19cf5c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x21464c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x9f964) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x1eb024) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x1ebb8c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x23eacc) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x8a2d4) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0xbbb84) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0xbc6b4) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x1c18dc) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x8ae0c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x20d88c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x4e0fc) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x2bc804) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x1240c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0xcb8c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x2a8734) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x2796b4) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x27a0fc) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x15386c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x1536bc) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0xa167c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0xa07fc) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x9eb2c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x2d0b1c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x4bb64) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x1f288c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x1efb8c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x1ed30c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x1ef65c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x1eea84) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x1edeb4) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x1ec754) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x2a0aa4) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x18e1fc) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x14c624) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x14c454) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x18ebd4) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x18ea0c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x1f1cd4) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x12c29c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x247e1c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x16e8c4) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x2230a4) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x221cf4) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x223a34) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x220a4c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x224dd4) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x22441c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x227f04) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x227544) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x2257c4) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x2261b4) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x226b64) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x169564) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x2226ac) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x28caec) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0xbef1c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0xbd20c) DEBUG volatility3.framework.symbols.windows.extensions.registry: Unexpected node type encountered when traversing subkeys: symbol_table_name1!_CM_KEY_INDEX, signature: n DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x24) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x24) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x24) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x24) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x24) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x24) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x24) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x24) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x24) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x24) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x24) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x24) DEBUG volatility3.plugins.windows.cmdscan: Possible CommandHistorySize values: {50} DEBUG volatility3.plugins.windows.cmdscan: Found conhost process <EPROCESS symbol_table_name1!_EPROCESS: layer_name @ 0x9e0cf9896080 #2120> with pid 1372 DEBUG volatility3.framework.symbols: Unresolved reference: symbol_table_name1!_MI_ZERO_THREAD_CONTEXT DEBUG volatility3.plugins.windows.cmdscan: Found conhost.exe base at 0x7ff6738c0000 DEBUG volatility3.plugins.windows.consoles: Determined OS Version: 10.0 15.17134 Traceback (most recent call last): File "/home/kali/volatility3/vol.py", line 11, in volatility3.cli.main() File "/home/kali/volatility3/volatility3/cli/init.py", line 934, in main CommandLine().run() File "/home/kali/volatility3/volatility3/cli/init.py", line 522, in run renderer.render(grid) File "/home/kali/volatility3/volatility3/cli/text_renderer.py", line 329, in render grid.populate(visitor, outfd) File "/home/kali/volatility3/volatility3/framework/renderers/init.py", line 318, in populate for level, item in self._generator: File "/home/kali/volatility3/volatility3/framework/plugins/windows/cmdscan.py", line 298, in _generator for ( File "/home/kali/volatility3/volatility3/framework/plugins/windows/cmdscan.py", line 138, in get_command_history conhost_symbol_table = consoles.Consoles.create_conhost_symbol_table( File "/home/kali/volatility3/volatility3/framework/plugins/windows/consoles.py", line 348, in create_conhost_symbol_table symbol_filename, class_types = cls.determine_conhost_version( File "/home/kali/volatility3/volatility3/framework/plugins/windows/consoles.py", line 317, in determine_conhost_version raise NotImplementedError( NotImplementedError: This version of Windows is not supported: 10.0 15.17134!

┌──(kali㉿kali)-[~/volatility3] └─$ python3 vol.py -vvv -f ../Desktop_cs3.raw windows.consoles.Consoles 2 ⨯ INFO volatility3.cli: Volatility plugins path: ['/home/kali/volatility3/volatility3/plugins', '/home/kali/volatility3/volatility3/framework/plugins'] INFO volatility3.cli: Volatility symbols path: ['/home/kali/volatility3/volatility3/symbols', '/home/kali/volatility3/volatility3/framework/symbols'] DEBUG volatility3.plugins.yarascan: Using yara-python module DEBUG volatility3.plugins.renderers.parquet_renderer: Arrow/Parquet libraries not found Volatility 3 Framework 2.27.0 INFO volatility3.framework.automagic: Detected a windows category plugin INFO volatility3.framework.automagic: Running automagic: ConstructionMagic DETAIL 1 volatility3.framework.configuration.requirements: IndexError - No configuration provided: plugins.Consoles.kernel.layer_name DETAIL 1 volatility3.framework.configuration.requirements: Symbol table requirement not yet fulfilled: plugins.Consoles.kernel.symbol_table_name DETAIL 1 volatility3.framework.configuration.requirements: IndexError - No configuration provided: plugins.Consoles.kernel.layer_name DETAIL 1 volatility3.framework.configuration.requirements: Symbol table requirement not yet fulfilled: plugins.Consoles.kernel.symbol_table_name DETAIL 1 volatility3.framework.automagic.construct_layers: Failed on requirement: plugins.Consoles.kernel DETAIL 1 volatility3.framework.configuration.requirements: IndexError - No configuration provided: plugins.Consoles.kernel.layer_name DETAIL 1 volatility3.framework.automagic.construct_layers: Failed on requirement: plugins.Consoles.kernel.layer_name DETAIL 1 volatility3.framework.configuration.requirements: IndexError - No configuration provided: plugins.Consoles.kernel.layer_name DETAIL 1 volatility3.framework.automagic.construct_layers: Failed on requirement: plugins.Consoles.kernel DETAIL 1 volatility3.framework.configuration.requirements: Symbol table requirement not yet fulfilled: plugins.Consoles.kernel.symbol_table_name DETAIL 1 volatility3.framework.automagic.construct_layers: Failed on requirement: plugins.Consoles.kernel.symbol_table_name DETAIL 1 volatility3.framework.configuration.requirements: Symbol table requirement not yet fulfilled: plugins.Consoles.kernel.symbol_table_name DETAIL 1 volatility3.framework.automagic.construct_layers: Failed on requirement: plugins.Consoles.kernel DETAIL 1 volatility3.framework.configuration.requirements: IndexError - No configuration provided: plugins.Consoles.kernel.layer_name DETAIL 1 volatility3.framework.configuration.requirements: Symbol table requirement not yet fulfilled: plugins.Consoles.kernel.symbol_table_name DETAIL 1 volatility3.framework.automagic.construct_layers: Failed on requirement: plugins.Consoles INFO volatility3.framework.automagic: Running automagic: SymbolCacheMagic INFO volatility3.framework.automagic: Running automagic: LayerStacker DETAIL 1 volatility3.framework.configuration.requirements: IndexError - No configuration provided: plugins.Consoles.kernel.layer_name DETAIL 1 volatility3.framework.configuration.requirements: Symbol table requirement not yet fulfilled: plugins.Consoles.kernel.symbol_table_name DEBUG volatility3.framework.automagic.windows: Detecting Self-referential pointer for recent windows DEBUG volatility3.framework.automagic.windows: DtbSelfRef64bit test succeeded at 0x1ad000 DEBUG volatility3.framework.automagic.windows: DTB was found at: 0x1ad000 DETAIL 1 volatility3.framework.configuration.requirements: IndexError - No configuration provided: plugins.Consoles.kernel.layer_name DETAIL 1 volatility3.framework.configuration.requirements: IndexError - No configuration provided: plugins.Consoles.kernel.layer_name DETAIL 1 volatility3.framework.configuration.requirements: Symbol table requirement not yet fulfilled: plugins.Consoles.kernel.symbol_table_name DETAIL 1 volatility3.framework.configuration.requirements: IndexError - No configuration provided: plugins.Consoles.kernel.layer_name DETAIL 1 volatility3.framework.configuration.requirements: Symbol table requirement not yet fulfilled: plugins.Consoles.kernel.symbol_table_name DETAIL 1 volatility3.framework.automagic.construct_layers: Failed on requirement: plugins.Consoles.kernel DETAIL 1 volatility3.framework.configuration.requirements: IndexError - No configuration provided: plugins.Consoles.kernel.layer_name DETAIL 1 volatility3.framework.configuration.requirements: IndexError - No configuration provided: plugins.Consoles.kernel.layer_name.memory_layer DETAIL 1 volatility3.framework.interfaces.configuration: TypeError - kernel_virtual_offset requirements only accept int type: None DETAIL 1 volatility3.framework.interfaces.configuration: TypeError - kernel_virtual_offset requirements only accept int type: None DETAIL 1 volatility3.framework.interfaces.configuration: TypeError - kernel_banner requirements only accept str type: None DETAIL 1 volatility3.framework.interfaces.configuration: TypeError - kernel_banner requirements only accept str type: None DETAIL 1 volatility3.framework.configuration.requirements: Symbol table requirement not yet fulfilled: plugins.Consoles.kernel.symbol_table_name DETAIL 1 volatility3.framework.automagic.construct_layers: Failed on requirement: plugins.Consoles.kernel.symbol_table_name DETAIL 1 volatility3.framework.configuration.requirements: Symbol table requirement not yet fulfilled: plugins.Consoles.kernel.symbol_table_name DETAIL 1 volatility3.framework.automagic.construct_layers: Failed on requirement: plugins.Consoles.kernel DETAIL 1 volatility3.framework.configuration.requirements: Symbol table requirement not yet fulfilled: plugins.Consoles.kernel.symbol_table_name DETAIL 1 volatility3.framework.automagic.construct_layers: Failed on requirement: plugins.Consoles DEBUG volatility3.framework.automagic.stacker: physical_layer maximum_address: 1073741823 DEBUG volatility3.framework.automagic.stacker: Stacked layers: ['IntelLayer', 'FileLayer'] INFO volatility3.framework.automagic: Running automagic: WinSwapLayers INFO volatility3.framework.automagic: Running automagic: KernelPDBScanner DETAIL 1 volatility3.framework.configuration.requirements: Symbol table requirement not yet fulfilled: plugins.Consoles.kernel.symbol_table_name DETAIL 1 volatility3.framework.configuration.requirements: Symbol table requirement not yet fulfilled: plugins.Consoles.kernel.symbol_table_name DETAIL 1 volatility3.framework.configuration.requirements: Symbol table requirement not yet fulfilled: plugins.Consoles.kernel.symbol_table_name DEBUG volatility3.framework.automagic.pdbscan: Kernel base determination - searching layer module list structure DEBUG volatility3.framework.automagic.pdbscan: Kernel base determination - searching layer module list structure DEBUG volatility3.framework.automagic.pdbscan: Setting kernel_virtual_offset to 0xf8037bc95000 DEBUG volatility3.framework.symbols.windows.pdbutil: Using symbol library: ntkrnlmp.pdb/039281E5F80D4711858194C121C9D89D-1 INFO volatility3.framework.automagic: Running automagic: SymbolFinder
INFO volatility3.framework.automagic: Running automagic: KernelModule DEBUG volatility3.cli: Successfully constructed windows.consoles.Consoles (3, 0, 0)

PID Process ConsoleInfo Property Address Data DEBUG volatility3.plugins.windows.consoles: Possible CommandHistorySize values before checking Registry: {50} DEBUG volatility3.plugins.windows.consoles: Possible HistoryBufferMax values before checking Registry: {4} DEBUG volatility3.framework.symbols: Unresolved reference: symbol_table_name1!_JOB_ACCESS_STATE DEBUG volatility3.framework.symbols: Unresolved reference: symbol_table_name1!_JOB_CPU_RATE_CONTROL DEBUG volatility3.framework.symbols: Unresolved reference: symbol_table_name1!_JOB_NET_RATE_CONTROL DEBUG volatility3.framework.symbols: Unresolved reference: symbol_table_name1!_JOB_NOTIFICATION_INFORMATION DEBUG volatility3.framework.symbols: Unresolved reference: symbol_table_name1!_PSP_STORAGE DEBUG volatility3.framework.symbols: Unresolved reference: symbol_table_name1!_KTMNOTIFICATION_PACKET DEBUG volatility3.framework.symbols: Unresolved reference: symbol_table_name1!_DBGKP_ERROR_PORT DEBUG volatility3.framework.symbols: Unresolved reference: symbol_table_name1!_CI_NGEN_PATHS DEBUG volatility3.framework.symbols: Unresolved reference: symbol_table_name1!_WNF_SCOPE_MAP DEBUG volatility3.framework.symbols: Unresolved reference: symbol_table_name1!_EX_WNF_SUBSCRIPTION DEBUG volatility3.framework.symbols: Unresolved reference: symbol_table_name1!_PO_PROCESS_ENERGY_CONTEXT DEBUG volatility3.framework.symbols: Unresolved reference: symbol_table_name1!_EPROCESS_QUOTA_BLOCK DEBUG volatility3.framework.symbols: Unresolved reference: symbol_table_name1!_PAGEFAULT_HISTORY DEBUG volatility3.framework.symbols: Unresolved reference: symbol_table_name1!_DEVICE_NODE_IOMMU_EXTENSION DEBUG volatility3.framework.symbols: Unresolved reference: symbol_table_name1!_EX_TIMER DEBUG volatility3.framework.symbols: Unresolved reference: symbol_table_name1!_ETW_SOFT_RESTART_CONTEXT DEBUG volatility3.framework.symbols: Unresolved reference: symbol_table_name1!_ETW_STACK_CACHE DEBUG volatility3.framework.symbols: Unresolved reference: symbol_table_name1!_ACTIVATION_CONTEXT_DATA DEBUG volatility3.framework.symbols: Unresolved reference: symbol_table_name1!_FLS_CALLBACK_INFO DEBUG volatility3.framework.symbols: Unresolved reference: symbol_table_name1!_ASSEMBLY_STORAGE_MAP DEBUG volatility3.framework.symbols: Unresolved reference: symbol_table_name1!_ETW_PERFECT_HASH_FUNCTION DEBUG volatility3.framework.symbols: Unresolved reference: symbol_table_name1!_HAL_PMC_COUNTERS DEBUG volatility3.framework.symbols: Unresolved reference: symbol_table_name1!_SCSI_REQUEST_BLOCK DEBUG volatility3.framework.symbols.windows.extensions.registry: Unexpected node type encountered when traversing subkeys: symbol_table_name1!_CM_KEY_INDEX, signature: n DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x9213a4) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x24) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x24) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x24) DEBUG volatility3.framework.symbols.windows.extensions.registry: Unexpected node type encountered when traversing subkeys: symbol_table_name1!_CM_KEY_INDEX, signature: n DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x24) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x24) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x24) DEBUG volatility3.framework.symbols.windows.extensions.registry: Unexpected node type encountered when traversing subkeys: symbol_table_name1!_CM_KEY_INDEX, signature: n DEBUG volatility3.framework.symbols.windows.extensions.registry: Unexpected node type encountered when traversing subkeys: symbol_table_name1!_CM_KEY_INDEX, signature: n DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x2c5e2c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x88594) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x886a4) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x887b4) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x888c4) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x264024) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x20ac44) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x20ad4c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x20ae54) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x20af5c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x167e74) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x20b084) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x2825c4) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x2b5804) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x2b590c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x2c5ee4) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x889d4) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x88ae4) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x2c5f9c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x1c8e24) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x87664) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x2013d4) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x87a24) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x20b194) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x9b44c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x4912c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x297814) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x87024) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x2472d4) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x20b2a4) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x280b94) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x298414) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x461ec) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x462f4) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x9c1ac) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x2014dc) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x88bf4) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x88d04) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x201684) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x20bb24) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x20b3b4) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x20b4c4) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x88e14) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x87194) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x870dc) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x20b5d4) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x88f24) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x20182c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x8724c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x89064) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x201984) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x20b6e4) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x20b7f4) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x201b2c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x201c34) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x201d3c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x201e44) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x9cf1c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x2841dc) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x282504) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x8951c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x26411c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x20a73c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x20a834) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x201f0c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x1fd5ac) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x23c4c4) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x278b34) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x278c3c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x20a92c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x8756c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x46e44) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x26430c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x87304) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x873bc) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x28bec4) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x263ec4) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x47a34) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x201f9c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x26bd5c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x20b904) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x23c57c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x89614) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x20ba14) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x8971c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x20bc34) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x264214) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x87474) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x485ac) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x20bd44) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x4f7c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x22693c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x2dcc44) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x2dc79c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x1523c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x26930c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x1f2bec) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x23bb7c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0xbd5d4) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x170bec) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0xbcfc) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x470a4) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0xcb14) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x8982c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x45704) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x19c3dc) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x16881c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0xbb32c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x28b76c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x24fcc4) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x22e8bc) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x2575fc) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x2232a4) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x1a6434) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x1b85ac) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x16e3dc) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x23ca44) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0xc6c6c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0xbbdbc) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x4bc24) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x162cfc) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x1d1aac) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x299d14) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x1c839c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x4a374) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x1b39bc) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0xb5764) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x2821c4) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x19d05c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x23b24c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x14554) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x2158ac) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x20744) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x209a3c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x223024) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x8c7dc) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x47b3c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x27f8fc) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0xa0b3c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x463fc) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x220434) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x2acdac) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x46f54) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x223e44) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x4d584) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x2442fc) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x9fcd4) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x1c0b84) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x4b024) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x23e1d4) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x125b4) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x224c9c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x4ebac) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x252024) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x16042c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x221c34) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x2bd2b4) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x2141c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x2c0304) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0xbf924) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x204294) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x987c4) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0xc09ac) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x233b7c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x298024) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x22116c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x22412c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x1edf7c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x2784cc) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x3cbc) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0xbc8cc) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x2a3e0c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x251704) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x265f54) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0xb3534) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x2809e4) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x22761c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x2c9ecc) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x496bc) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x1eb2dc) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x231594) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x25dbfc) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x27e364) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x263924) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x16e454) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x23357c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x8ab2c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x2c06fc) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x1ed024) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x20c1a4) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x1aee74) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x26774c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x2259f4) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x486b4) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x9ee64) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x8a024) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x1d84ac) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x8775c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x1e1e2c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x24f4ac) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x261574) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x8d47c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x2914bc) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x23ad9c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x2826f4) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x9e024) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x247674) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x2c0b04) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x296f6c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x1ed834) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x289874) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x8b384) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x299024) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x2991ac) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x19211c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x1930dc) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x1216c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x2bd414) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x252254) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x1f1134) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x299ea4) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x264ce4) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x514c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x2494bc) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x18d7b4) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x18d614) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x18d15c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x18d024) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x1934c4) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x4a2b4) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x4af34) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x248974) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x121c4) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x4c784) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x4d47c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0xb5024) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x2a3cfc) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0xb5c34) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x8c6e4) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x8ba54) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x8d35c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0xbe85c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0xbdd14) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x4922c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x498c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x15154) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x2b64cc) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x1b45c4) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x2932dc) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x23873c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x1f3464) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x1e293c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x2b036c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x21344) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x2207c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0xca4c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x240d04) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0xd8cc) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x23f68c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x176f34) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x21bf4c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x217dec) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x2a9944) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x291d44) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x1a70fc) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x1d232c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x1ea41c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x244a6c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x292b0c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x291ecc) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x1afc1c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x281efc) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x15e94) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x19dbdc) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x19cf5c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x21464c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x9f964) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x1eb024) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x1ebb8c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x23eacc) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x8a2d4) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0xbbb84) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0xbc6b4) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x1c18dc) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x8ae0c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x20d88c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x4e0fc) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x2bc804) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x1240c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0xcb8c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x2a8734) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x2796b4) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x27a0fc) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x15386c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x1536bc) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0xa167c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0xa07fc) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x9eb2c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x2d0b1c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x4bb64) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x1f288c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x1efb8c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x1ed30c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x1ef65c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x1eea84) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x1edeb4) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x1ec754) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x2a0aa4) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x18e1fc) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x14c624) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x14c454) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x18ebd4) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x18ea0c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x1f1cd4) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x12c29c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x247e1c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x16e8c4) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x2230a4) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x221cf4) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x223a34) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x220a4c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x224dd4) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x22441c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x227f04) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x227544) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x2257c4) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x2261b4) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x226b64) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x169564) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x2226ac) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x28caec) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0xbef1c) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0xbd20c) DEBUG volatility3.framework.symbols.windows.extensions.registry: Unexpected node type encountered when traversing subkeys: symbol_table_name1!_CM_KEY_INDEX, signature: n DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x24) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x24) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x24) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x24) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x24) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x24) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x24) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x24) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x24) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x24) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x24) DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x24) DEBUG volatility3.plugins.windows.consoles: Possible CommandHistorySize values: {50} DEBUG volatility3.plugins.windows.consoles: Possible HistoryBufferMax values: {4} DEBUG volatility3.plugins.windows.consoles: Found conhost process <EPROCESS symbol_table_name1!_EPROCESS: layer_name @ 0x9e0cf9896080 #2120> with pid 1372 DEBUG volatility3.framework.symbols: Unresolved reference: symbol_table_name1!_MI_ZERO_THREAD_CONTEXT DEBUG volatility3.plugins.windows.consoles: Found conhost.exe base at 0x7ff6738c0000 DEBUG volatility3.plugins.windows.consoles: Determined OS Version: 10.0 15.17134 Traceback (most recent call last): File "/home/kali/volatility3/vol.py", line 11, in volatility3.cli.main() File "/home/kali/volatility3/volatility3/cli/init.py", line 934, in main CommandLine().run() File "/home/kali/volatility3/volatility3/cli/init.py", line 522, in run renderer.render(grid) File "/home/kali/volatility3/volatility3/cli/text_renderer.py", line 329, in render grid.populate(visitor, outfd) File "/home/kali/volatility3/volatility3/framework/renderers/init.py", line 318, in populate for level, item in self._generator: File "/home/kali/volatility3/volatility3/framework/plugins/windows/consoles.py", line 876, in _generator for proc, console_info, console_properties in self.get_console_info( File "/home/kali/volatility3/volatility3/framework/plugins/windows/consoles.py", line 433, in get_console_info conhost_symbol_table = cls.create_conhost_symbol_table( File "/home/kali/volatility3/volatility3/framework/plugins/windows/consoles.py", line 348, in create_conhost_symbol_table symbol_filename, class_types = cls.determine_conhost_version( File "/home/kali/volatility3/volatility3/framework/plugins/windows/consoles.py", line 317, in determine_conhost_version raise NotImplementedError( NotImplementedError: This version of Windows is not supported: 10.0 15.17134!

┌──(kali㉿kali)-[~/volatility3] └─$ python3 vol.py -vvv -f ../Desktop_Phineas.raw windows.consoles.Consoles 1 ⨯ INFO volatility3.cli: Volatility plugins path: ['/home/kali/volatility3/volatility3/plugins', '/home/kali/volatility3/volatility3/framework/plugins'] INFO volatility3.cli: Volatility symbols path: ['/home/kali/volatility3/volatility3/symbols', '/home/kali/volatility3/volatility3/framework/symbols'] DEBUG volatility3.plugins.yarascan: Using yara-python module DEBUG volatility3.plugins.renderers.parquet_renderer: Arrow/Parquet libraries not found Volatility 3 Framework 2.27.0 INFO volatility3.framework.automagic: Detected a windows category plugin INFO volatility3.framework.automagic: Running automagic: ConstructionMagic DETAIL 1 volatility3.framework.configuration.requirements: IndexError - No configuration provided: plugins.Consoles.kernel.layer_name DETAIL 1 volatility3.framework.configuration.requirements: Symbol table requirement not yet fulfilled: plugins.Consoles.kernel.symbol_table_name DETAIL 1 volatility3.framework.configuration.requirements: IndexError - No configuration provided: plugins.Consoles.kernel.layer_name DETAIL 1 volatility3.framework.configuration.requirements: Symbol table requirement not yet fulfilled: plugins.Consoles.kernel.symbol_table_name DETAIL 1 volatility3.framework.automagic.construct_layers: Failed on requirement: plugins.Consoles.kernel DETAIL 1 volatility3.framework.configuration.requirements: IndexError - No configuration provided: plugins.Consoles.kernel.layer_name DETAIL 1 volatility3.framework.automagic.construct_layers: Failed on requirement: plugins.Consoles.kernel.layer_name DETAIL 1 volatility3.framework.configuration.requirements: IndexError - No configuration provided: plugins.Consoles.kernel.layer_name DETAIL 1 volatility3.framework.automagic.construct_layers: Failed on requirement: plugins.Consoles.kernel DETAIL 1 volatility3.framework.configuration.requirements: Symbol table requirement not yet fulfilled: plugins.Consoles.kernel.symbol_table_name DETAIL 1 volatility3.framework.automagic.construct_layers: Failed on requirement: plugins.Consoles.kernel.symbol_table_name DETAIL 1 volatility3.framework.configuration.requirements: Symbol table requirement not yet fulfilled: plugins.Consoles.kernel.symbol_table_name DETAIL 1 volatility3.framework.automagic.construct_layers: Failed on requirement: plugins.Consoles.kernel DETAIL 1 volatility3.framework.configuration.requirements: IndexError - No configuration provided: plugins.Consoles.kernel.layer_name DETAIL 1 volatility3.framework.configuration.requirements: Symbol table requirement not yet fulfilled: plugins.Consoles.kernel.symbol_table_name DETAIL 1 volatility3.framework.automagic.construct_layers: Failed on requirement: plugins.Consoles INFO volatility3.framework.automagic: Running automagic: SymbolCacheMagic INFO volatility3.framework.automagic: Running automagic: LayerStacker DETAIL 1 volatility3.framework.configuration.requirements: IndexError - No configuration provided: plugins.Consoles.kernel.layer_name DETAIL 1 volatility3.framework.configuration.requirements: Symbol table requirement not yet fulfilled: plugins.Consoles.kernel.symbol_table_name DEBUG volatility3.framework.automagic.windows: Detecting Self-referential pointer for recent windows DEBUG volatility3.framework.automagic.windows: DtbSelfRef64bit test succeeded at 0x187000 DEBUG volatility3.framework.automagic.windows: DTB was found at: 0x187000 DETAIL 1 volatility3.framework.configuration.requirements: IndexError - No configuration provided: plugins.Consoles.kernel.layer_name DETAIL 1 volatility3.framework.configuration.requirements: IndexError - No configuration provided: plugins.Consoles.kernel.layer_name DETAIL 1 volatility3.framework.configuration.requirements: Symbol table requirement not yet fulfilled: plugins.Consoles.kernel.symbol_table_name DETAIL 1 volatility3.framework.configuration.requirements: IndexError - No configuration provided: plugins.Consoles.kernel.layer_name DETAIL 1 volatility3.framework.configuration.requirements: Symbol table requirement not yet fulfilled: plugins.Consoles.kernel.symbol_table_name DETAIL 1 volatility3.framework.automagic.construct_layers: Failed on requirement: plugins.Consoles.kernel DETAIL 1 volatility3.framework.configuration.requirements: IndexError - No configuration provided: plugins.Consoles.kernel.layer_name DETAIL 1 volatility3.framework.configuration.requirements: IndexError - No configuration provided: plugins.Consoles.kernel.layer_name.memory_layer DETAIL 1 volatility3.framework.interfaces.configuration: TypeError - kernel_virtual_offset requirements only accept int type: None DETAIL 1 volatility3.framework.interfaces.configuration: TypeError - kernel_virtual_offset requirements only accept int type: None DETAIL 1 volatility3.framework.interfaces.configuration: TypeError - kernel_banner requirements only accept str type: None DETAIL 1 volatility3.framework.interfaces.configuration: TypeError - kernel_banner requirements only accept str type: None DETAIL 1 volatility3.framework.configuration.requirements: Symbol table requirement not yet fulfilled: plugins.Consoles.kernel.symbol_table_name DETAIL 1 volatility3.framework.automagic.construct_layers: Failed on requirement: plugins.Consoles.kernel.symbol_table_name DETAIL 1 volatility3.framework.configuration.requirements: Symbol table requirement not yet fulfilled: plugins.Consoles.kernel.symbol_table_name DETAIL 1 volatility3.framework.automagic.construct_layers: Failed on requirement: plugins.Consoles.kernel DETAIL 1 volatility3.framework.configuration.requirements: Symbol table requirement not yet fulfilled: plugins.Consoles.kernel.symbol_table_name DETAIL 1 volatility3.framework.automagic.construct_layers: Failed on requirement: plugins.Consoles DEBUG volatility3.framework.automagic.stacker: physical_layer maximum_address: 536870911 DEBUG volatility3.framework.automagic.stacker: Stacked layers: ['IntelLayer', 'FileLayer'] INFO volatility3.framework.automagic: Running automagic: WinSwapLayers INFO volatility3.framework.automagic: Running automagic: KernelPDBScanner DETAIL 1 volatility3.framework.configuration.requirements: Symbol table requirement not yet fulfilled: plugins.Consoles.kernel.symbol_table_name DETAIL 1 volatility3.framework.configuration.requirements: Symbol table requirement not yet fulfilled: plugins.Consoles.kernel.symbol_table_name DETAIL 1 volatility3.framework.configuration.requirements: Symbol table requirement not yet fulfilled: plugins.Consoles.kernel.symbol_table_name DEBUG volatility3.framework.automagic.pdbscan: Kernel base determination - searching layer module list structure DEBUG volatility3.framework.automagic.pdbscan: Setting kernel_virtual_offset to 0xf8000284b000 DEBUG volatility3.framework.symbols.windows.pdbutil: Using symbol library: ntkrnlmp.pdb/16CBD9DBFDC24E7F8796DCFDA1497FFA-2 INFO volatility3.framework.automagic: Running automagic: SymbolFinder
INFO volatility3.framework.automagic: Running automagic: KernelModule DEBUG volatility3.cli: Successfully constructed windows.consoles.Consoles (3, 0, 0)

PID Process ConsoleInfo Property Address Data DEBUG volatility3.plugins.windows.consoles: Possible CommandHistorySize values before checking Registry: {50} DEBUG volatility3.plugins.windows.consoles: Possible HistoryBufferMax values before checking Registry: {4} DEBUG volatility3.framework.symbols: Unresolved reference: symbol_table_name1!_KTMNOTIFICATION_PACKET DEBUG volatility3.framework.symbols: Unresolved reference: symbol_table_name1!_EPROCESS_QUOTA_BLOCK DEBUG volatility3.framework.symbols: Unresolved reference: symbol_table_name1!_PAGEFAULT_HISTORY DEBUG volatility3.framework.symbols: Unresolved reference: symbol_table_name1!_PSP_CPU_QUOTA_APC DEBUG volatility3.framework.symbols: Unresolved reference: symbol_table_name1!_JOB_ACCESS_STATE DEBUG volatility3.framework.symbols: Unresolved reference: symbol_table_name1!_ACTIVATION_CONTEXT_DATA DEBUG volatility3.framework.symbols: Unresolved reference: symbol_table_name1!_FLS_CALLBACK_INFO DEBUG volatility3.framework.symbols: Unresolved reference: symbol_table_name1!_ASSEMBLY_STORAGE_MAP DEBUG volatility3.framework.symbols: Unresolved reference: symbol_table_name1!_SCSI_REQUEST_BLOCK DEBUG volatility3.framework.symbols.windows.extensions.registry: Unexpected node type encountered when traversing subkeys: symbol_table_name1!_CM_KEY_INDEX, signature: n DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x24) DEBUG volatility3.framework.symbols.windows.extensions.registry: Unexpected node type encountered when traversing subkeys: symbol_table_name1!_CM_KEY_INDEX, signature: n DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x1396c) DEBUG volatility3.framework.symbols.windows.extensions.registry: Unexpected node type encountered when traversing subkeys: symbol_table_name1!_CM_KEY_INDEX, signature: n DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x24) DEBUG volatility3.framework.symbols.windows.extensions.registry: Unexpected node type encountered when traversing subkeys: symbol_table_name1!_CM_KEY_INDEX, signature: n DEBUG volatility3.framework.layers.registry: Failed to get cell signature for cell (0x24) DEBUG volatility3.framework.symbols.windows.extensions.registry: Unexpected node type encountered when traversing subkeys: symbol_table_name1!_CM_KEY_INDEX, signature: n DEBUG volatility3.framework.symbols.windows.extensions.registry: Unexpected node type encountered when traversing subkeys: symbol_table_name1!_CM_KEY_INDEX, signature: n DEBUG volatility3.framework.symbols.windows.extensions.registry: Unexpected node type encountered when traversing subkeys: symbol_table_name1!_CM_KEY_INDEX, signature: n DEBUG volatility3.framework.symbols.windows.extensions.registry: Unexpected node type encountered when traversing subkeys: symbol_table_name1!_CM_KEY_INDEX, signature: n DEBUG volatility3.plugins.windows.consoles: Possible CommandHistorySize values: {50} DEBUG volatility3.plugins.windows.consoles: Possible HistoryBufferMax values: {4} DEBUG volatility3.plugins.windows.consoles: Found conhost process <EPROCESS symbol_table_name1!_EPROCESS: layer_name @ 0xfa8002bbf060 #1232> with pid 2136 DEBUG volatility3.plugins.windows.consoles: Found conhost.exe base at 0xff720000 DEBUG volatility3.plugins.windows.consoles: Determined OS Version: 6.1 15.7600 Traceback (most recent call last): File "/home/kali/volatility3/vol.py", line 11, in volatility3.cli.main() File "/home/kali/volatility3/volatility3/cli/init.py", line 934, in main CommandLine().run() File "/home/kali/volatility3/volatility3/cli/init.py", line 522, in run renderer.render(grid) File "/home/kali/volatility3/volatility3/cli/text_renderer.py", line 329, in render grid.populate(visitor, outfd) File "/home/kali/volatility3/volatility3/framework/renderers/init.py", line 318, in populate for level, item in self._generator: File "/home/kali/volatility3/volatility3/framework/plugins/windows/consoles.py", line 876, in _generator for proc, console_info, console_properties in self.get_console_info( File "/home/kali/volatility3/volatility3/framework/plugins/windows/consoles.py", line 433, in get_console_info conhost_symbol_table = cls.create_conhost_symbol_table( File "/home/kali/volatility3/volatility3/framework/plugins/windows/consoles.py", line 348, in create_conhost_symbol_table symbol_filename, class_types = cls.determine_conhost_version( File "/home/kali/volatility3/volatility3/framework/plugins/windows/consoles.py", line 317, in determine_conhost_version raise NotImplementedError( NotImplementedError: This version of Windows is not supported: 6.1 15.7600!

Nov 17 '25 14:11 Phyambre

This list of versions that are supported by the consoles plugin is as follows:

                (10, 0, 17763, 1): "consoles-win10-17763-x64",
                (10, 0, 17763, 3232): "consoles-win10-17763-3232-x64",
                (10, 0, 18362, 0): "consoles-win10-18362-x64",
                (10, 0, 19041, 0): "consoles-win10-19041-x64",
                (10, 0, 20348, 1): "consoles-win10-20348-x64",
                (10, 0, 20348, 1970): "consoles-win10-20348-1970-x64",
                (10, 0, 20348, 2461): "consoles-win10-20348-2461-x64",
                (10, 0, 20348, 2520): "consoles-win10-20348-2461-x64",
                (10, 0, 22000, 0): "consoles-win10-22000-x64",
                (10, 0, 22621, 1): "consoles-win10-22621-x64",
                (10, 0, 22621, 3527): "consoles-win10-22621-3527-x64",
                (10, 0, 25398, 0): "consoles-win10-22000-x64",

It appears the first output of windows you used was the closest to being supported, at 10.0 15.17134, the others all look to be Windows 7. It is supposed to attempt working with later versions of windows 10, but the difficulty is minor changes in the library might alter the structures and therefore the analysis significantly. Since we don't really have the capability to track updates to specific DLLs, we offer good support for the versions that were around when the plugin was released. From the looks of it, the version of windows 10 you tried, was earlier than the versions we support (17134 < 17763). We can leave the ticket open, hoping that the original plugin author will update the data files, but there's little more we do than that I'm afraid...

Nov 17 '25 18:11 ikelos

OK, thanks. I just wanted to teach Volatilty using only Volatility 3, so I will tell them in many old cases you still have to use Volatility 2. And, yes, we can leave the issue open hoping one day it will be implemented. Many OT environments still use old Windows.

Nov 17 '25 18:11 Phyambre